codexu-macos-usage-tracker
Warn
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to download binary releases and clone source code from an external GitHub repository (
github.com/shanggqm/codexU) that is not a recognized trusted vendor. - [REMOTE_CODE_EXECUTION]: Provides instructions to clone a remote repository and execute a build process (
make build), which involves compiling and running unvetted code from an external source on the local machine. - [COMMAND_EXECUTION]: Includes commands to bypass macOS Gatekeeper security protections, specifically using
xattr -dr com.apple.quarantineto allow the execution of non-notarized software. - [COMMAND_EXECUTION]: Instructs users to grant 'Full Disk Access' and manual read permissions to sensitive local directories (
~/.codex/and~/.claude/) containing private transcripts, token events, and session data.
Audit Metadata